A lot of SAP product such as NetWeaver using sapcrypto / commoncrypto library (sapcryptolib.dll or sapcryptolib.so) for SSL / TLS and encryption.
SSL / TLS client configuration.
ssl/client_ciphersuites = 150:PFS:HIGH::EC_P256:EC_HIGHSSL / TLS server configuration.
ssl/ciphersuites = 135:PFS:HIGH::EC_P256:EC_HIGHYou need at least 8.4.40 sapcrpytolib for SNI (Server Name Indication) support. Before SNI protocol client request certificate with domain IP instead of domain name. SNI used for hosting multiple site on same port with encryption.
ssl/client_sni_enabled = TRUEWe need updated kernel for using this parameter, details are in this note.
Also you can set these parameters as OS environment variable.
SAPSSL_CLIENT_CIPHERSUITES = 135:PFS:HIGH::EC_P256:EC_HIGH
SAPSSL_CLIENT_SNI_ENABLED = TRUEsapcryptolib versions for protocols
In below table you can find minumum sapcryptolib version for protocols.
| Protocol | Version |
| TLS 1.0 | 5.5.5 PL 28 |
| TLS 1.2 | 8.4.31 |
| SNI | 8.4.40 |
Leave a Reply